apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: tailscale-operator
  namespace: tailscale
spec:
  interval: 1h
  timeout: 15m
  chart:
    spec:
      chart: tailscale-operator
      version: "1.96.x"
      sourceRef:
        kind: HelmRepository
        name: tailscale
        namespace: tailscale
      interval: 12h
  targetNamespace: tailscale
  install:
    createNamespace: true
    crds: Create
  upgrade:
    crds: CreateReplace
  values:
    # Operator configuration
    operatorConfig:
      # Tag to use for pods created by the operator (e.g., tailnet)
      tags: [tailnet]
      # Auth key from secret - PLACEHOLDER, replace with real key
      operatorSecretRef:
        name: tailscale-operator-authkey
        key: authkey
      logFile: "/var/log/tailscale.log"
      # Don't block pod startup if Tailscale auth fails
      waitForLinkLocal: false
    # Disable webhook (optional)
    webhook:
      enabled: false